Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa
File:                     3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa (raw, json)
Hash identifier:          Dry6bRAfyx5uwv8ff0H3YRUhN5VEm+gpBxyqTZzvYpM=
Subject key identifier:   10:86:7F:AD:87:07:49:A0:7C:AB:B7:C3:4D:F1:D8:EB:F5:8A:8F:6E
Certificate issuer:       /CN=ADE8A200ADB998852CD6198EECB50CA1079EB2A6
Certificate serial:       75E1B16DBCEEC8E41CA1E3FDA7756B97AFBFAF6F
Authority key identifier: AD:E8:A2:00:AD:B9:98:85:2C:D6:19:8E:EC:B5:0C:A1:07:9E:B2:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa
Signing time:             Mon 10 Feb 2025 18:00:40 +0000
ROA not before:           Mon 10 Feb 2025 17:55:40 +0000
ROA not after:            Mon 09 Feb 2026 18:00:40 +0000
asID:                     263360
IP address blocks:        191.37.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 17:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e1:b1:6d:bc:ee:c8:e4:1c:a1:e3:fd:a7:75:6b:97:af:bf:af:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE8A200ADB998852CD6198EECB50CA1079EB2A6
        Validity
            Not Before: Feb 10 17:55:40 2025 GMT
            Not After : Feb  9 18:00:40 2026 GMT
        Subject: CN=10867FAD870749A07CABB7C34DF1D8EBF58A8F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:8e:06:d2:0d:08:6a:21:22:a4:04:18:e9:
                    61:a5:32:22:a4:23:25:63:87:52:4a:36:ad:cd:d9:
                    3b:26:4a:a3:f9:cc:06:47:1b:e0:93:b1:09:93:ae:
                    65:ba:d7:6f:42:6e:64:4f:9a:a2:7e:8b:41:0a:ba:
                    9c:cc:53:e7:a7:8a:1b:0d:05:ab:98:a2:24:4c:c6:
                    4e:0b:02:67:fe:36:ae:ec:9f:4f:11:78:b5:ce:7e:
                    65:9b:68:77:d6:38:c0:42:c0:38:fa:4b:9e:ea:41:
                    8d:19:18:69:01:53:ae:54:55:ac:2c:6c:68:17:d9:
                    b8:77:06:77:67:58:23:b8:1a:a2:fb:81:90:7d:23:
                    8e:ef:2b:e6:44:75:69:7b:9d:be:df:33:96:cf:c6:
                    84:56:53:64:e4:77:16:8b:7f:17:9a:93:ba:51:b7:
                    94:12:31:be:ea:cc:6d:c7:c1:05:91:c4:8f:76:2a:
                    68:72:37:30:4a:82:b7:ce:07:88:f2:26:2b:d2:19:
                    2f:13:b4:75:68:09:13:f0:99:a6:22:4f:49:71:9d:
                    2e:b2:c9:54:64:50:28:31:f9:90:16:66:f9:84:36:
                    9f:cf:5b:26:0f:43:1a:71:df:e8:ca:4f:09:17:55:
                    d1:b5:6b:fa:ca:47:96:f4:55:78:da:a9:1c:0d:6f:
                    eb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:86:7F:AD:87:07:49:A0:7C:AB:B7:C3:4D:F1:D8:EB:F5:8A:8F:6E
            X509v3 Authority Key Identifier:
                keyid:AD:E8:A2:00:AD:B9:98:85:2C:D6:19:8E:EC:B5:0C:A1:07:9E:B2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE8A200ADB998852CD6198EECB50CA1079EB2A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32322d3232203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:00:51:e5:92:35:30:de:c9:79:13:31:39:21:99:f1:44:
         83:9b:08:d5:73:49:d1:d8:60:8e:14:b6:6e:8a:15:ba:3b:b0:
         01:3c:f5:6e:5a:91:47:4f:1f:6b:0a:aa:10:0b:bc:a7:9e:5e:
         e9:17:87:d2:d0:f9:e6:cb:ef:17:66:af:45:03:20:1b:bb:e7:
         21:00:8a:78:a8:15:ef:4c:5d:37:43:5b:46:cb:f7:46:f4:00:
         78:e5:0a:c9:47:fc:84:d6:fd:a5:66:5a:b5:ba:54:99:83:3d:
         e2:7d:6e:13:67:17:0d:d2:17:12:8f:9c:81:47:66:2e:ae:6a:
         bc:cc:d9:1a:ef:74:65:e0:5e:1b:7b:3a:ff:f3:ce:3f:b2:88:
         2b:7a:97:59:89:95:df:cd:db:8d:b6:65:17:82:2f:49:68:06:
         eb:8d:1c:ca:24:d1:10:37:fc:05:03:49:b5:67:18:57:7f:4a:
         9b:4d:38:ec:9c:8e:f4:12:95:b8:86:a1:0e:fb:c0:54:5c:79:
         5b:51:c7:4e:cb:b5:24:76:d3:6b:3f:aa:fa:e2:f5:9b:71:3d:
         af:90:aa:45:d2:20:f9:31:d7:ca:9b:94:e9:03:e6:a7:74:d6:
         6c:93:27:7d:35:d9:fd:62:0d:8f:ff:18:a0:40:6c:2c:a1:40:
         93:df:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:39 2025 by rpki-client